Privacy Notice

Salvador Salazar Avendaño, hereinafter identified as the "Controller," operating commercially under the names "S² Analytics & Insights" (hereinafter "S²") and/or "SCuadrada," is responsible for the use and protection of your personal, financial, and business data, in accordance with the Federal Law for the Protection of Personal Data Held by Private Parties (the "Law") and its Regulations. Our Structural Variance philosophy extends to the security of your information, ensuring that the use of your data is strictly limited to improving the profitability of your organization.

I. Data Controller

The data controller is Salvador Salazar Avendaño, operating under the names S² Analytics & Insights and/or SCuadrada, with registered address at Lázaro Cárdenas No. 1161-E, Colonia Valle del Mirador, Monterrey, Nuevo León, ZIP 64750, Mexico. Phone: +52 (81) 8309-6474. Website: www.scuadrada.mx.

II. Personal Data Collected

For the preparation of service agreements, confidentiality agreements, and the execution of our agile methodologies, we collect the following categories of data:

• Identification and Contact: Full name, position, address, email, phone (landline and mobile), age, nationality, educational background, and professional profile.
• Legal Data: Corporate bylaws and amendments, powers of attorney, identification of authorized representatives, etc.
• Tax Data: Billing information, tax identification, tax compliance certificates, etc.
• Business Data (Critical): Sales volumes, profit margins, customer acquisition costs (CAC), transaction dates, and customer purchase behaviors — collected exclusively for strategic consulting and analytics services. Anonymized or identifiable depending on the service.
• Financial Data: Cost structures and revenue projections for the calculation of the IFD (Revenue Leak Index).

In all cases, the collection of Personal Data by S² Analytics & Insights is carried out in good faith and for the purposes described herein. It is therefore presumed that the data provided by their holders is truthful and complete, and remains the responsibility of the party providing it.

We guarantee that all data will be protected with administrative, technical, and physical security measures to prevent damage, loss, alteration, or unauthorized access.

III. Purposes of Processing

Your data will be used exclusively for the following strategic purposes:

1. Strategic Consulting and Profitability Diagnostics: Execution of high-precision methodologies for the optimization of business assets:
   • Pareto Analysis: Identification of critical profitability nodes (80/20) for the prioritization of resources and commercial efforts.
   • Cohort Analysis: Determination of retention rates, Lifetime Value (LTV) projections, and identification of leak points in the customer lifecycle.
   • Strategic SWOT Analysis: Definition of the roadmap and strategic direction based on internal capabilities and market opportunities.
   • S² Profitability Analysis: Elimination of the Inefficiency Tax — identifying every dollar lost in untracked processes, unreported waste, or uncollected invoices — and returning that resource to the company's balance sheet.
   • Executive Report Generation: Documentation of qualitative and quantitative findings for high-level financial decision-making.
2. Data Intelligence and Compliance: Transformation of raw information into strategic assets through the design and deployment of Control Dashboards for real-time KPI monitoring, and development of legal instruments related to asset and data protection.
3. Commercial Relationship and Service Delivery: Marketing management, commercial prospecting, and fulfillment of obligations arising from the professional services engaged.

Once the processing purposes have been fulfilled, and where no legal provision establishes otherwise, S² Analytics & Insights may use the collected data solely for statistical purposes in a generic and non-personalized manner, respecting the privacy of the data subject at all times.

IV. Data Transfer

At S² Analytics & Insights, we apply administrative, technical, and physical security measures that exceed industry standards:

• Data Encryption: Any database shared for the Cohort Engine or Pareto Calculation is handled under secure transfer protocols.
• Access Limitation: Only the consulting staff assigned to your project has access to sensitive information.
• No Third-Party Sharing: S² Analytics & Insights does not sell, rent, gift, or share your data with third parties under any circumstances, except by express legal requirement.

You authorize that your data may be transferred to related companies, subsidiaries, or vendors with whom S² Analytics & Insights has a legal relationship, solely to fulfill the strategic purposes described above. The only transfer to unrelated third parties will be to comply with legal obligations, without your prior consent.

V. ARCO Rights (Access, Rectification, Cancellation, and Opposition)

You have the right to know what data we hold about your company, the purposes for which it is used, and the conditions of its use (Access). You also have the right to request the correction of your information (Rectification), its removal from our records (Cancellation), or to object to the use of your data for specific purposes (Opposition).

These rights — known under Mexican law as "ARCO Rights" — are functionally equivalent to the data subject rights recognized under international frameworks such as the GDPR and CCPA, including the right to access, correct, delete, and restrict the processing of your personal data.

To exercise your ARCO rights, send an email to: cumplimiento@scuadrada.mx

Important Note: Revoking consent for certain purposes may make it impossible to continue providing the requested service, given the technical nature of data analytics.

VI. Procedure for Exercising ARCO Rights

For any request, you must send a signed communication to: arco@scuadrada.mx, addressed to Salvador Salazar Avendaño. The request must include:

• Name of the data subject and a clear description of the right being exercised.
• Valid official identification (and notarized power of attorney if acting as a representative).
• Email address or mailing address to receive the response.

S² Analytics & Insights will issue a response within a maximum of 20 business days. Data delivery under this process will be provided free of charge via email.

VII. Use of Digital Tools (Calculators and Cookies)

Our Revenue Leak Calculator uses the data entered on a temporary basis — it does not store any information in order to generate the instant diagnostic. By using it, you accept the processing of that information under the terms described herein.

VIII. Acceptance of This Notice

By browsing this site or engaging the services of S² Analytics & Insights, you acknowledge and agree to this Privacy Notice.

IX. Changes to This Privacy Notice

S² Analytics & Insights reserves the right to modify and/or update this Privacy Notice at its sole discretion. Any changes will be communicated through its website www.scuadrada.mx/en/ or by written notice sent to the data subject's email address, as legally required.

X. Digital, Electronic, or Online Format

The parties agree that the means for perfecting the meeting of minds between them may be digital, electronic, or online in format, where it shall be sufficient to express consent through acceptance of the terms and by providing personal data on the S² Analytics & Insights Platform, without requiring a handwritten signature on any document.